deps: bump the npm-dependencies group across 1 directory with 58 updates

[dependabot]

Bumps the npm-dependencies group with 58 updates in the / directory:

Package	From	To
prettier	3.8.3	3.9.5
typescript	5.9.3	7.0.2
express-rate-limit	7.5.1	8.5.2
pino	9.14.0	10.3.1
pino-http	10.5.0	11.0.0
esbuild	0.27.3	0.28.1
thread-stream	3.1.0	4.2.0
@hookform/resolvers	3.10.0	5.4.0
@radix-ui/react-accordion	1.2.12	1.2.16
@radix-ui/react-alert-dialog	1.1.15	1.1.19
@radix-ui/react-aspect-ratio	1.1.8	1.1.11
@radix-ui/react-avatar	1.1.11	1.2.2
@radix-ui/react-checkbox	1.3.3	1.3.7
@radix-ui/react-collapsible	1.1.12	1.1.16
@radix-ui/react-context-menu	2.2.16	2.3.3
@radix-ui/react-dialog	1.1.15	1.1.19
@radix-ui/react-dropdown-menu	2.1.16	2.1.20
@radix-ui/react-hover-card	1.1.15	1.1.19
@radix-ui/react-label	2.1.8	2.1.11
@radix-ui/react-menubar	1.1.16	1.1.20
@radix-ui/react-navigation-menu	1.2.14	1.2.18
@radix-ui/react-popover	1.1.15	1.1.19
@radix-ui/react-progress	1.1.8	1.1.12
@radix-ui/react-radio-group	1.3.8	1.4.3
@radix-ui/react-scroll-area	1.2.10	1.2.14
@radix-ui/react-select	2.2.6	2.3.3
@radix-ui/react-separator	1.1.8	1.1.11
@radix-ui/react-slider	1.3.6	1.4.3
@radix-ui/react-slot	1.2.4	1.3.0
@radix-ui/react-switch	1.2.6	1.3.3
@radix-ui/react-tabs	1.1.13	1.1.17
@radix-ui/react-toast	1.2.15	1.2.19
@radix-ui/react-toggle	1.1.10	1.1.14
@radix-ui/react-toggle-group	1.1.11	1.1.15
@radix-ui/react-tooltip	1.2.8	1.2.12
chokidar	4.0.3	5.0.0
date-fns	3.6.0	4.4.0
react-day-picker	9.14.0	10.0.1
react-hook-form	7.75.0	7.81.0
react-resizable-panels	2.1.9	4.12.2
recharts	2.15.4	3.9.2
@tailwindcss/typography	0.5.19	0.5.20
react-icons	5.6.0	5.7.0
wouter	3.9.0	3.10.0
orval	8.9.1	8.22.0
uuid	11.1.1	14.0.1
@types/uuid	10.0.0	11.0.0
@tanstack/react-query	5.100.9	5.101.2
@types/node	25.6.2	26.1.1
@vitejs/plugin-react	5.2.0	6.0.3
framer-motion	12.38.0	12.42.2
lucide-react	0.545.0	1.24.0
react-dom	19.1.0	19.2.7
react	19.1.0	19.2.7
@types/react	19.2.14	19.2.17
tailwind-merge	3.5.0	3.6.0
tsx	4.21.0	4.23.1
zod	3.25.76	4.4.3

Updates prettier from 3.8.3 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

3.9.4

• Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

• Markdown: Fix unexpected removal of characters in liquid syntax (prettier/prettier#19489 by @​seiyab)
• TypeScript: Allow decorators to be used with declare on class fields (prettier/prettier#19492 by @​evoactivity)

🔗 Changelog

3.9.1

• CLI: Fix ignored file has been cached incorrectly (#19483 by @​kovsu)

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

• Fix Flow variance annotation print (#19022 by @​marcoww6)

🔗 Changelog

3.8.4

• Markdown: Fix blank lines between list items and nested sub-lists being removed in Markdown/MDX (prettier/prettier#17746 by @​byplayer)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text
<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text
<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](https://github.com/prettier/prettier/blob/main/<> "title")
<!-- Prettier 3.9.4 -->
[link](https://github.com/prettier/prettier/blob/main/ "title")
<!-- Prettier 3.9.5 -->
</tr></table>

... (truncated)

Commits

• b6c7d18 Release 3.9.5
• cd54ccc Avoid corrupting empty Markdown link with title (#19487)
• 2bb67ce Preserving comments' placement property (#19567)
• 91bcac8 Add more tests for comment-only object type (#19587)
• cbee737 Remove space in empty object type (#19583)
• 6394c73 Align empty module declaration with TS (#19568)
• a4e6f7a Prevent the addition of space in type() with + (#19516)
• 3d063b5 Ignore dangling comments when checking type parameter comments (#19572)
• 908503e Handle dangling comments in SwitchStatement (#19581)
• 943a475 Angular: Support expression for exhaustive typechecking (#19571)
• Additional commits viewable in compare view

Updates typescript from 5.9.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).
• fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

• npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

• fixed issues query for TypeScript 6.0.0 (Beta).
• fixed issues query for TypeScript 6.0.1 (RC).
• fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

• npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

• fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

• npm

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates express-rate-limit from 7.5.1 to 8.5.2

Release notes

Sourced from express-rate-limit's releases.

v8.5.2

You can view the changelog here.

v8.5.1

You can view the changelog here.

v8.5.0

You can view the changelog here.

v8.4.1

You can view the changelog here.

v8.4.0

You can view the changelog here.

v8.3.2

You can view the changelog here.

v8.3.1

You can view the changelog here.

v8.3.0

You can view the changelog here.

v8.2.1

You can view the changelog here.

v8.2.0

You can view the changelog here.

v8.1.0

You can view the changelog here.

v8.0.1

You can view the changelog here.

v8.0.0

You can view the changelog here.

Commits

• 9774693 8.5.2
• 0e94cc0 v8.5.2 changelog
• 9a583c5 feat: simplify IPv6 key generation (#633)
• 4f4b3fb chore(deps-dev): bump lint-staged from 16.4.0 to 17.0.4 (#632)
• 3c1d6c5 chore(deps-dev): bump the development-dependencies group with 7 updates (#631)
• 18884b6 chore(deps): bump basic-ftp from 5.2.0 to 5.3.1 (#630)
• dacc980 chore(deps): bump handlebars from 4.7.8 to 4.7.9 (#629)
• 486d0c6 chore(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#627)
• 50cc3f6 8.5.1
• 92c8e3e chore: bump ip-address library to latest (#626)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for express-rate-limit since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates pino from 9.14.0 to 10.3.1

Release notes

Sourced from pino's releases.

v10.3.1

What's Changed

• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in pinojs/pino#2385
• build(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.23.2 by @​dependabot[bot] in pinojs/pino#2386
• docs: clarify transport level filtering behavior by @​mcollina in pinojs/pino#2390
• fix(transport): sanitize invalid NODE_OPTIONS preloads for workers by @​mcollina in pinojs/pino#2391

Full Changelog: pinojs/pino@v10.3.0...v10.3.1

v10.3.0

What's Changed

• feat: improve the return type of multistream().clone() by @​mrazauskas in pinojs/pino#2377
• feat: set worker thread name for transport identification by @​mcollina in pinojs/pino#2380

Full Changelog: pinojs/pino@v10.2.1...v10.3.0

v10.2.1

What's Changed

• fix: prevent ERR_WORKER_INVALID_EXEC_ARGV with monitoring tools by @​mcollina in pinojs/pino#2379

Full Changelog: pinojs/pino@v10.2.0...v10.2.1

v10.2.0

What's Changed

• chore: lint TypeScript files by @​mrazauskas in pinojs/pino#2363
• fix: prevent memory leak when using transport with --import preload by @​mcollina in pinojs/pino#2374

New Contributors

• @​mrazauskas made their first contribution in pinojs/pino#2363

Full Changelog: pinojs/pino@v10.1.1...v10.2.0

v10.1.1

What's Changed

• fix(types): Correct conditional type handling for generic log function arguments by @​samchungy in pinojs/pino#2329
• perf: use JSON.stringify in fast path for node v25+ by @​ronag in pinojs/pino#2330
• build(deps): bump actions/setup-node from 4 to 6 by @​dependabot[bot] in pinojs/pino#2336
• build(deps-dev): bump borp from 0.20.2 to 0.21.0 by @​dependabot[bot] in pinojs/pino#2337
• build(deps): bump pino-abstract-transport from 2.0.0 to 3.0.0 by @​dependabot[bot] in pinojs/pino#2338
• docs: update CONTRIBUTING.md to reference 'main' instead of 'master' by @​NoobFullStack in pinojs/pino#2334
• feat(browser): add reportCaller to surface user callsite by @​dev-KingMaster in pinojs/pino#2340
• docs: update transports.md by @​marklai1998 in pinojs/pino#2224
• docs: add Node.js 22+ native TypeScript type stripping support by @​mcollina in pinojs/pino#2347
• feat(types): use ThreadStream type from thread-stream by @​CHC383 in pinojs/pino#2320
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in pinojs/pino#2354
• build(deps): update thread-stream to v4 by @​mcollina in pinojs/pino#2356
• fix: harden transport loading against prototype pollution by @​omdxp in pinojs/pino#2358

... (truncated)

Commits

• 6b34498 Bumped v10.3.1
• f1203e6 fix(transport): sanitize invalid NODE_OPTIONS preloads for workers (#2391)
• 6a8e598 docs: clarify transport level filtering behavior (#2390)
• 49a4807 Merge branch 'main' of github.com:pinojs/pino
• 960bbbb build(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.23.2 (#2386)
• e2a5b4a build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#2385)
• 04859e2 chore: update gitignore for ai assistant files
• d6adf03 Bumped v10.3.0
• 06d55b1 feat: set worker thread name for transport identification (#2380)
• a728702 fix: fix multistream().clone() return type (#2377)
• Additional commits viewable in compare view

Updates pino-http from 10.5.0 to 11.0.0

Release notes

Sourced from pino-http's releases.

v11.0.0

What's Changed

• build(deps-dev): bump @​types/node from 22.15.32 to 24.0.3 by @​dependabot[bot] in pinojs/pino-http#370
• build(deps-dev): bump typescript from 5.8.3 to 5.9.2 by @​dependabot[bot] in pinojs/pino-http#373
• build(deps-dev): bump tsd from 0.32.0 to 0.33.0 by @​dependabot[bot] in pinojs/pino-http#376
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in pinojs/pino-http#380
• build(deps): bump actions/setup-node from 4 to 5 by @​dependabot[bot] in pinojs/pino-http#382
• Update for pino@10 by @​jsumners in pinojs/pino-http#383

Full Changelog: pinojs/pino-http@v10.5.0...v11.0.0

Commits

• 6615953 v11.0.0
• da0442e Update for pino@10 (#383)
• c77bf25 build(deps): bump actions/setup-node from 4 to 5 (#382)
• 5b06a22 build(deps): bump actions/checkout from 4 to 5 (#380)
• bc69ee9 build(deps-dev): bump tsd from 0.32.0 to 0.33.0 (#376)
• c2ccdb3 build(deps-dev): bump typescript from 5.8.3 to 5.9.2 (#373)
• 6dbe316 build(deps-dev): bump @​types/node from 22.15.32 to 24.0.3 (#370)
• See full diff in compare view

Updates esbuild from 0.27.3 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1

• Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

  This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

  Thanks to @​dellalibera for reporting this issue.

• Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

  The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

  Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

  Thanks to @​sondt99 for reporting this issue.

• Avoid inlining using and await using declarations (#4482)

  Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

  // Original code
  {
    using x = new Resource()
    x.activate()
  }
  // Old output (with --minify)
  new Resource().activate();
  // New output (with --minify)
  {using e=new Resource;e.activate()}

• Fix module evaluation when an error is thrown (#4461, #4467)

  If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

• Fix some edge cases around the new operator (#4477)

  Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

  // Original code
  new (foo()`bar`)()
  new (foo()?.bar)()
  // Old output
  new foo()bar();
  new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.1

• Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

  This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

  Thanks to @​dellalibera for reporting this issue.

• Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

  The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

  Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

  Thanks to @​sondt99 for reporting this issue.

• Avoid inlining using and await using declarations (#4482)

  Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

  // Original code
  {
    using x = new Resource()
    x.activate()
  }
  // Old output (with --minify)
  new Resource().activate();
  // New output (with --minify)
  {using e=new Resource;e.activate()}

• Fix module evaluation when an error is thrown (#4461, #4467)

  If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

• Fix some edge cases around the new operator (#4477)

  Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

  // Original code
  new (foo()`bar`)()
  new (foo()?.bar)()
  // Old output
  new foo()bar();
  new (foo())?.bar();

... (truncated)

Commits

• bb9db84 publish 0.28.1 to npm
• 9ff053e security: add integrity checks to the Deno API
• 0a9bf21 enforce non-negative size in gzip parser
• e2a1a71 security: forbid \\ in local dev server requests
• 83a2cbf fix #4482: don't inline using declarations
• 308ad74 fix #4471: renaming of nested var declarations
• f013f5f fix some typos
• aafd6e4 chore: fix some minor issues in comments (#4462)
• 15300c3 follow up: cjs evaluation fixes
• 1bda0c3 fix #4461, fix #4467: esm evaluation fixes
• Additional commits viewable in compare view

Updates thread-stream from 3.1.0 to 4.2.0

Release notes

Sourced from thread-stream's releases.

v4.2.0

What's Changed

• build(deps-dev): bump pino-elasticsearch from 8.1.0 to 9.0.0 by @​dependabot[bot] in pinojs/thread-stream#216
• fix: handle multibyte writes across buffer boundaries by @​mcollina in pinojs/thread-stream#217

Full Changelog: pinojs/thread-stream@v4.1.0...v4.2.0

v4.1.0

What's Changed

• chore: remove husky by @​mcollina in pinojs/thread-stream#182
• Bump @​types/node from 22.19.1 to 24.10.1 by @​dependabot[bot] in pinojs/thread-stream#186
• Bump @​types/node from 24.10.4 to 25.0.2 by @​dependabot[bot] in pinojs/thread-stream#187
• Bump actions/checkout from 4 to 6 by @​dependabot[bot] in pinojs/thread-stream#188
• feat: add name parameter to Worker by @​mcollina in pinojs/thread-stream#191
• build(deps-dev): bump borp from 0.21.0 to 1.0.0 by @​dependabot[bot] in pinojs/thread-stream#192
• Bump actions/setup-node from 4 to 6 by @​dependabot[bot] in pinojs/thread-stream#189
• build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 by @​dependabot[bot] in pinojs/thread-stream#196
• fix: add end-to-end flush semantics for flush(cb) by @​mcollina in pinojs/thread-stream#198
• build(deps): bump real-require from 0.2.0 to 1.0.0 by @​dependabot[bot] in pinojs/thread-stream#201
• build(deps-dev): bump sonic-boom from 4.2.1 to 5.0.0 by @​dependabot[bot] in pinojs/thread-stream#205
• fix: ignore watch mode worker messages by @​mcollina in pinojs/thread-stream#213

Full Changelog: pinojs/thread-stream@v4.0.0...v4.1.0

v4.0.0

What's Changed

• Bump @​types/node from 20.14.13 to 22.0.0 by @​dependabot[bot] in pinojs/thread-stream#158
• build(deps-dev): lock typescript minor version by @​Fdawgs in pinojs/thread-stream#159
• Bump @​yao-pkg/pkg from 5.16.1 to 6.0.0 by @​dependabot[bot] in pinojs/thread-stream#161
• Bump typescript from 5.3.3 to 5.7.3 by @​dependabot[bot] in pinojs/thread-stream#170
• Bump coverallsapp/github-action from 2.3.0 to 2.3.6 by @​dependabot[bot] in pinojs/thread-stream#171
• Convert from tap to node:test and drop Node 18 support by @​mcollina in pinojs/thread-stream#180
• Update pkg test targets to Node.js 20 and 22 by @​mcollina in pinojs/thread-stream#179
• refactor: replace setTimeout with Atomics.waitAsync by @​mcollina in pinojs/thread-stream#178
• fix: await close event in thread-management tests to prevent flakiness by @​mcollina in pinojs/thread-stream#181

Full Changelog: pinojs/thread-stream@v3.1.0...v4.0.0

v3.2.0

What's Changed

• fix: stabilize v3.x base tests and buffer wraparound by @​mcollina in pinojs/thread-stream#223
• fix: ignore watch mode worker messages by @​mcollina in pinojs/thread-stream#222

Full Changelog: pinojs/thread-stream@v3.1.0...v3.2.0

Commits

• e73c3dd Bumped v4.2.0
• 86242f5 fix: handle multibyte writes across buffer boundaries (#217)
• c2c2eaf build(deps-dev): bump pino-elasticsearch from 8.1.0 to 9.0.0 (#216)
• 6ccdf25 Bumped v4.1.0
• db2acc0 fix: ignore watch mode worker messages (#213)
• ef5908c build(deps-dev): bump sonic-boom from 4.2.1 to 5.0.0 (#205)
• 5b1d0b5 build(deps): bump real-require from 0.2.0 to 1.0.0 (#201)
• 52c002a fix: add end-to-end flush semantics for flush(cb) (#198)
• 35cdc55 build(deps-dev): bump neostandard from 0.12.2 to 0.13.0 (#196)
• 25de650 Bump actions/setup-node from 4 to 6 (#189)
• Additional commits viewable in compare view

Updates @hookform/resolvers from 3.10.0 to 5.4.0

Release notes

Sourced from @​hookform/resolvers's releases.

v5.4.0

5.4.0 (2026-05-21)

Features

• feat: add ata-validator resolver (#845)

Fixes

• fix issue with toNestErrors.ts (#848)

• add guidance on passing context to yupResolver (useForm context) (#835) (3d29924)

v5.2.2

5.2.2 (2025-09-14)

Bug Fixes

• zod: fix output type for Zod 4 resolver (#803) (e95721d)

v5.2.1

5.2.1 (2025-07-29)

Bug Fixes

• discriminated union for zod v4 mini (#784) (49a0d7b)
• zod v4 peer deps (#798) (2d28e6a)
• zod: fix output type for Zod 4 resolver (#801) (bc09647)

v5.2.0

5.2.0 (2025-07-25)

Features

• ajv: add ajv-formats for ajvResolver (#797) (f040039)

v5.1.1

5.1.1 (2025-06-09)

Bug Fixes

• zod peer dep issue (#780) (79cd8b2)

v5.1.0

5.1.0 (2025-06-07)

... (truncated)

Commits

• 3d29924 feat: add guidance on passing context to yupResolver (useForm context) (#835)
• 56b68f3 feat: 5.3.0
• cf8562d update readme on ata-validator
• 5e5b610 fix issue with toNestErrors.ts (#848)
• 72aacf8 Revise supported versions in SECURITY.md
• ad89a20 feat: add ata-validator resolver (#845)
• 02286db ci: updated publish workflow to use node 24 (#838)
• 2e9bc7c Fix(zodResolver): error paths in complex unions #787 (#819)
• e95721d fix(zod): fix output type for Zod 4 resolver (#803)
• 49a0d7b fix: discriminated union for zod v4 mini (#784)
• Additional commits viewable in compare view

Updates @radix-ui/react-accordion from 1.2.12 to 1.2.16

Changelog

Sourced from @​radix-ui/react-accordion's changelog.

1.2.16

• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-collapsible@1.1.16, @radix-ui/react-collection@1.1.12

1.2.15

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-collapsible@1.1.15, @radix-ui/react-collection@1.1.11

1.2.14

• Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
• Updated dependencies: @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-collapsible@1.1.14

1.2.13

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-collapsible@1.1.13, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-accordion since your current version.

Updates @radix-ui/react-alert-dialog from 1.1.15 to 1.1.19

Changelog

Sourced from @​radix-ui/react-alert-dialog's changelog.

1.1.19

• Updated dependencies: @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-dialog@1.1.19

1.1.18

• Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dialog@1.1.18

1.1.17

• Removed dev-only warnings for dialogs when title and/or description is not rendered.
• Updated dependencies: @radix-ui/react-dialog@1.1.17, @radix-ui/react-primitive@2.1.6

1.1.16

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-dialog@1.1.16, @radix-ui/react-slot@1.2.5, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-primitive@2.1.5

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-alert-dialog since your current version.

Updates @radix-ui/react-aspect-ratio from 1.1.8 to 1.1.11

Changelog

Sourced from @​radix-ui/react-aspect-ratio's changelog.

1.1.11

• Updated dependencies: @radix-ui/react-primitive@2.1.7

1.1.10

• Updated dependencies: @radix-ui/react-primitive@2.1.6

1.1.9

• Added repository.directory to all package.json files
• Updated dependencies: @radix-ui/react-primitive@2.1.5

Commits

• See full diff in compare view

Maintainer changes

This vers...

Description has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🧭 PR triage

• Areas: area:api area:mcp area:apps area:integrations area:tooling
• Size: size:XL (4788 lines across 15 files)

CI runs the full gate suite (build, typecheck, proofs, API tests, safety gate). This comment updates on each push.

[DanFashauer]

·@·d·ependabot r·ecreate

This PR conflicts with SignalGrid_Alpha, which has moved a long way since it was opened (the branch is 76 commits behind). Rebuilding it from scratch against the current base will produce a clean, reviewable bump group rather than a hand-resolved 15-file conflict across 58 package updates.

---

Generated by Claude Code

[DanFashauer]

Correcting my previous comment — recreating this is necessary but not sufficient, because this is not a routine bump.

Inspecting the diff, the group bundles two major upgrades in with 56 other updates:

• typescript ~5.9.3 → ~7.0.2 — a major jump applied across all 44 workspace projects
• uuid ^11.0.3 → ^14.0.1 (with @types/uuid ^10 → ^11) — three majors

Neither is a security patch that wants merging quickly, and a TypeScript major is a migration with its own compile-surface risk, not a dependency refresh. Merging this group as-is would land that migration under a "bump dependencies" title, where a later bisect would not think to look for it.

The base has also moved twice today (#137 and #107), so the branch is conflicted against a tree that no longer resembles what it was cut from.

Recommended: close this PR and let Dependabot regenerate against the current base, then handle the two majors as their own changes with the full gate suite run against each. If the intent is to keep dependencies current without the majors, an ignore entry for typescript and uuid major versions in .github/dependabot.yml would let the remaining 56 updates flow as a clean, mergeable group.

I have not closed it — that is the owner's call, and I did not want to discard a PR I did not open.

---

Generated by Claude Code